Veille CVE

Semaine du 11 novembre au 17 novembre 2024

3 CVE

Critique 1 Élevée 2 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes
  1. CVE-2024-11120 9.8 Critique Exploitée

    GeoVision GV-VS12 · GeoVision GV-VS11 · GeoVision GV-DSP_LPR_V3 · GeoVision GVLX 4 V2

    Certain EOL GeoVision devices have an OS Command Injection vulnerability. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device. Moreover, this vulnerability has already been exploited by attackers, and we have received related reports.

  2. CVE-2024-8069 8.0 Élevée Exploitée

    Citrix Session Recording

    Limited remote code execution with privilege of a NetworkService Account access in Citrix Session Recording if the attacker is an authenticated user on the same intranet as the session recording server

  3. CVE-2024-8068 8.0 Élevée Exploitée

    Citrix Session Recording

    Privilege escalation to NetworkService Account access in Citrix Session Recording when an attacker is an authenticated user in the same Windows Active Directory domain as the session recording server domain